Apple Plans Tighter macOS Full Disk Access Controls for AI Agents
Apple is planning tighter macOS Full Disk Access controls in response to risks created when AI agents can access sensitive local data, according to reporting published October 5. The concern…
Google Pauses Open-Source Bug Bounty Program Amid AI-Generated Spam
Google has paused its open-source vulnerability reward program while it works on changes to address a surge in low-quality, AI-generated bug reports, according to reporting published October 5. The company…
Citrix NetScaler SAML Zero-Day Added to CISA KEV After Active Exploitation
CISA added CVE-2026-88779, a Citrix NetScaler vulnerability affecting SAML deployments, to its Known Exploited Vulnerabilities catalog on October 4 after evidence of active exploitation. The issue has been described as…
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
Fortinet says attackers are exploiting a FortiMail vulnerability that permits unauthenticated arbitrary file writes through crafted HTTP requests. Organizations should follow Fortinet remediation guidance immediately, limit administrative exposure, and investigate…
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Dell has addressed six flaws in Container Storage Modules that researchers say can enable authentication bypass, storage-credential access, and cluster-wide privilege escalation. Kubernetes operators using affected Dell CSM components should…
Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
A China-nexus campaign attributed to UAT-11587 reportedly targeted Asian government and policy organizations with the Rust-based Antino backdoor, using Microsoft 365 services for command-and-control. Security teams should investigate anomalous Outlook…
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
GitLab has fixed CVE-2026-90970, described as a critical 9.9 flaw in AI Gateway that could allow logged-in Duo Agent Platform users to run commands on self-hosted gateways. Administrators should identify…
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
The Warlock ransomware operation reportedly exploited SharePoint flaws against at least four organizations, including two critical-infrastructure operators, and attempted to disable security tooling before ransomware deployment. Teams running affected SharePoint…
China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
Threat researchers report that China-aligned TA419 targeted U.S. AI policy experts using reply-triggered adversary-in-the-middle phishing designed to capture Microsoft credentials and session cookies. Defenders should review identity-provider sign-in activity, enforce…
Critical CVE-2026-104286 Reportedly Enables Unauthenticated Arbitrary File Writes
SecurityWeek and The Hacker News reported on CVE-2026-104286, a critical-severity path-traversal vulnerability said to allow unauthenticated attackers to write arbitrary files to an affected underlying system. Arbitrary file-write conditions can…